Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
File:                     u99YzWESke9boarLayzE7VCwEVc.mft (raw, json)
Hash identifier:          5Lwp9G8XJCO66MzcIx8Mds7DJpBFZKSojZl4Jspf6co=
Subject key identifier:   AE:D4:A3:25:EF:47:D2:B4:39:F3:1B:A9:F0:90:FA:48:D8:BE:6F:EB
Authority key identifier: BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57
Certificate issuer:       /CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157
Certificate serial:       0537
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
Manifest number:          051B
Signing time:             Tue 06 Oct 2026 23:46:55 +0000
Manifest this update:     Tue 06 Oct 2026 23:46:54 +0000
Manifest next update:     Tue 13 Oct 2026 23:46:54 +0000
Files and hashes:         1: u99YzWESke9boarLayzE7VCwEVc.crl (hash: vaRcyscBVmF49hystjigcOQ6ry5JXp1lzZOmn2Xgr34=)
                          2: 08241A166B1111EE99759439C4F9AE02.roa (hash: K46zscW9+DlHk+xiudMsMr6EAgw3qNVaD7QCOdFwwmc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl
                          rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 23:46:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1335 (0x537)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D46FD, serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157
        Validity
            Not Before: Oct  6 23:46:54 2026 GMT
            Not After : Oct 13 23:46:54 2026 GMT
        Subject: CN=6ac5886f-3aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f8:31:ec:76:26:51:84:03:27:10:98:4a:c0:
                    d3:13:f9:a8:8f:2b:fa:7b:1a:d5:ef:a7:5a:61:e4:
                    02:96:f1:23:2a:ba:c3:eb:a3:bb:ba:3e:47:b1:24:
                    04:0c:b7:c7:02:d4:5d:0f:4a:5e:3a:5c:98:b3:c1:
                    8f:39:e0:c8:f6:fd:0f:56:be:db:6a:4b:58:69:cf:
                    6b:e3:57:9b:0e:e4:ed:3d:e3:01:3b:5c:fa:30:86:
                    e5:81:ff:53:ce:4e:66:49:73:93:9d:e1:ed:af:24:
                    dd:78:68:d1:a6:00:02:14:cb:0b:ac:40:b7:a5:79:
                    ac:b8:e7:4f:c6:4e:d7:f5:fb:fa:15:eb:ec:c9:91:
                    6d:bf:2a:b9:71:3e:3a:bc:2c:f2:72:b2:93:ac:87:
                    38:11:2e:15:48:23:b8:07:0f:bd:b9:0b:ba:dc:6b:
                    6a:05:62:13:aa:1d:c5:2f:a7:40:05:01:4d:95:2a:
                    3b:06:b4:31:52:df:68:27:3c:db:4c:23:75:7e:dc:
                    94:14:e7:0b:f7:f5:e8:18:af:0b:97:be:0d:86:41:
                    3c:68:e8:2f:59:f1:49:2d:51:ae:45:a0:02:6c:64:
                    88:ac:d5:3d:b3:a7:d7:23:9f:29:1e:e4:2c:9a:8e:
                    19:e8:d3:ef:da:0c:3f:f9:fa:56:db:61:6d:ae:e8:
                    9e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D4:A3:25:EF:47:D2:B4:39:F3:1B:A9:F0:90:FA:48:D8:BE:6F:EB
            X509v3 Authority Key Identifier:
                keyid:BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:0d:25:d6:66:34:5c:7b:bd:79:6e:26:56:7c:36:d9:c5:3e:
         d1:e9:df:8f:25:ce:e7:35:9c:37:13:51:64:36:ea:1e:7b:50:
         7d:f4:e3:9c:e1:3c:c0:fd:fe:ae:33:ee:77:a4:da:d0:89:97:
         3a:08:cd:77:ef:f2:08:77:61:3d:b8:aa:c9:29:02:b7:9f:0f:
         b1:26:08:7c:17:f4:f5:60:c3:0f:7a:e4:ab:a9:f8:02:d2:c5:
         01:bb:ff:b0:e3:a3:58:a1:7f:e0:43:3f:3b:2b:b0:48:c2:f0:
         a5:cd:81:53:ed:76:f8:fd:33:bb:60:f3:a7:b8:d6:67:5c:95:
         62:43:10:b6:62:d6:28:71:5c:40:94:72:a5:0e:9d:33:1e:a7:
         9d:a4:c5:d3:b9:75:f5:d2:d8:24:59:94:45:65:05:01:55:65:
         6c:0f:ab:eb:35:f0:30:cc:9e:b1:ad:f0:62:9d:17:03:7e:80:
         9b:e1:5e:7d:19:39:d9:ec:cd:b7:11:e1:66:d0:ff:35:32:d3:
         65:70:a3:67:95:57:8b:9e:8f:4c:02:5e:dc:3d:ad:57:88:5e:
         33:33:62:3c:74:bd:ed:d2:da:e3:b9:be:03:78:c6:b5:07:0f:
         91:15:41:a1:c6:43:cc:9a:8c:ac:ef:6b:5c:58:72:10:fa:38:
         13:59:81:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:59:36 2026 by rpki-client